Palo Alto Networks Certified Network Security Architect Free Sample Questions

A financial institution requires strict Zero Trust implementation for their internal network. They need to ensure that access to the 'Core-Banking' zone is restricted not just by user identity, but also by the specific device being used, ensuring no unmanaged devices can connect. The solution must persist even if the device IP changes. Which combination of Palo Alto Networks features should the architect design into the security policy?

An architect is designing a network segmentation strategy for a manufacturing plant. The requirement is to isolate legacy OT systems from the IT network while allowing specific SCADA protocols. The customer is confused about the difference between Network Segmentation and Microsegmentation. Which statement accurately differentiates these concepts in this context?

A retail chain is deploying Prisma Access to secure their remote branches. They need to ensure that all web traffic, including SSL/TLS encrypted traffic, is inspected for zero-day malware without significantly impacting user experience. Which configuration ensures continuous security scanning of this allowed traffic?

Which service is essential for implementing continuous monitoring and analytics in a Zero Trust environment to detect anomalous behavior and visualize trust levels across the entire estate?

A healthcare organization is developing an internal Generative AI application. They need to ensure that the AI model itself is not manipulated (prompt injection) and that sensitive patient data is not inadvertently included in the model training or output. Which Palo Alto Networks solution specifically addresses the runtime security of the AI model and its interactions?

An architect is deploying Prisma AIRS to secure a Kubernetes-based AI inference cluster. The requirement is to enforce microsegmentation between the 'Ingest', 'Inference', and 'Output' pods. Which component enables this visibility and control within the Kubernetes environment?

When designing access controls for employees using public Generative AI tools (like ChatGPT or Gemini), which feature of 'AI Access' allows the organization to distinguish between enterprise and consumer versions of the same application to enforce data controls?

Select TWO key functions of Prisma AIRS 'AI Red Teaming' capabilities. (Select TWO)

Which architectural component is primarily responsible for ensuring that AI applications comply with GDPR data residency requirements by preventing sensitive PII from being sent to AI models hosted in non-compliant regions?

You are advising a customer on securing their new internal AI chatbot. They need to prevent employees from pasting proprietary source code into the chat interface. Which specific DLP classifier method would be most effective and accurate for this use case?